
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.mft
File: pOcgX11BJXpruV-QDuwKESPnUWQ.mft (raw, json)
Hash identifier: beJxapUVZS+Wei3qdBZiR9eDH5pWwpf9zKntqYnxrXU=
Subject key identifier: 80:D1:D4:4C:85:50:C6:2D:E1:2D:B5:39:31:6A:58:1A:E6:25:92:1B
Authority key identifier: A4:E7:20:5F:5D:41:25:7A:6B:B9:5F:90:0E:EC:0A:11:23:E7:51:64
Certificate issuer: /CN=a4e7205f5d41257a6bb95f900eec0a1123e75164
Certificate serial: 019A507485971A581BC0B67FACEF076FB247
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.mft
Manifest number: 1724
Signing time: Tue 04 Nov 2025 20:00:04 +0000
Manifest this update: Tue 04 Nov 2025 20:00:04 +0000
Manifest next update: Wed 05 Nov 2025 20:00:04 +0000
Files and hashes: 1: Kiv_IviKdC8pR128g7W0wceOpJ0.roa (hash: 50AAjX5lYU+hq4n12QkFVtcpqB6XzbZl6EuH3DlX6GI=)
2: O_qQBhVPe-lhoDKH0xP6ZLUmsAc.roa (hash: vu+grp6AJx6fVYcuWsQuJ7+juO2NiGJWuGAUCa5tGZs=)
3: dDDN-pm8MlP2fOpMtU7-mmZpLLc.roa (hash: GvJAp02zQtdWF4HXdYEMtMpvRfe1B4IDC0v2UHRYRus=)
4: kEWIZIp3fGY-KVqozb7d7-QMIuc.roa (hash: L3fmE7U8zD+tZ/ANMEm2Wevq9RhCHsMPy3iz467v0Hg=)
5: pOcgX11BJXpruV-QDuwKESPnUWQ.crl (hash: fy4nqAvZSYLC4O2GykeMfET9+Z7V8QNulmas/xH05wk=)
6: uU8hg8XfSe6mwX3ueW5oYDrRF0Q.roa (hash: UINusGV6ey+o0z0wW+D1a6Sa38oHaCWzK5v34NCpA+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:85:97:1a:58:1b:c0:b6:7f:ac:ef:07:6f:b2:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4e7205f5d41257a6bb95f900eec0a1123e75164
Validity
Not Before: Nov 4 20:00:04 2025 GMT
Not After : Nov 5 20:00:04 2025 GMT
Subject: CN=80d1d44c8550c62de12db539316a581ae625921b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a7:f4:84:06:df:5b:33:3b:02:ad:bb:8c:9d:
30:1e:80:c9:98:ce:f0:b0:98:bf:28:96:ae:d4:30:
71:60:81:38:6d:98:87:be:19:d0:3e:27:07:a3:f1:
8e:36:eb:eb:c0:57:f7:f2:11:7e:68:0a:0c:38:04:
4f:bc:c5:76:d2:29:b1:b7:a3:0a:73:8c:f2:56:01:
e7:03:d9:f2:ab:21:89:c5:24:6d:53:ae:7d:2e:d3:
f8:de:72:f1:22:49:34:0b:5d:87:0d:be:b1:2b:44:
04:83:07:ca:9e:f6:b5:45:54:e8:18:72:a0:b4:9a:
de:13:81:75:da:9b:e4:05:a8:10:d0:7b:68:2a:39:
e3:05:75:b0:b1:26:6f:5d:33:71:7d:be:e0:32:14:
50:44:7a:30:4b:a3:9b:6b:60:eb:26:56:ce:76:36:
02:44:d9:6a:f2:37:66:1e:2d:a0:39:4d:95:d9:83:
12:30:e4:c9:f3:37:d3:8c:c7:ee:ee:c0:df:77:5a:
28:2f:73:77:cb:6e:98:85:3d:a6:7a:72:4a:10:71:
11:46:69:78:20:81:4b:29:1a:c4:cb:74:56:f5:3e:
c3:8b:8f:5b:69:af:50:bf:b3:76:bd:d5:73:bc:01:
59:93:a4:84:4d:d0:e0:3f:d5:ff:02:51:8d:eb:10:
8a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:D1:D4:4C:85:50:C6:2D:E1:2D:B5:39:31:6A:58:1A:E6:25:92:1B
X509v3 Authority Key Identifier:
keyid:A4:E7:20:5F:5D:41:25:7A:6B:B9:5F:90:0E:EC:0A:11:23:E7:51:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:6e:9b:f7:cc:0e:71:c4:28:1f:cb:50:74:33:44:10:1f:04:
bf:d3:71:8b:55:9d:5c:b2:59:36:da:4d:e2:e3:11:ec:bc:8f:
7d:01:9c:ea:4d:3b:85:2c:94:7b:f5:56:22:9f:29:49:7f:e8:
6e:cc:bc:d6:a4:c9:b9:41:a9:b0:96:eb:cc:87:81:19:11:67:
d2:88:16:1b:3b:32:27:8d:26:81:04:e9:4c:13:2c:4e:d0:64:
b3:f4:cb:a2:a5:f0:f8:98:ab:11:52:dd:7f:7e:92:81:ef:ea:
7b:5a:c9:44:02:18:2a:aa:18:84:cd:45:2d:e9:11:3f:e8:06:
16:42:7a:8d:95:d8:5a:57:42:3a:1f:e7:bd:d1:46:4a:f2:62:
e6:8d:07:da:fa:7b:7a:3d:b4:72:9e:af:75:1b:3d:0d:e1:ca:
e6:6e:d0:8e:21:c7:c7:6b:9c:10:73:47:16:72:75:04:28:36:
50:2b:08:61:7c:3f:82:1e:7b:45:ae:ce:25:08:d3:cc:1c:7b:
c0:6d:82:3f:12:25:49:bc:aa:ac:8f:45:c9:dc:0e:1b:2d:68:
93:24:d6:ff:a1:66:45:2e:d1:90:72:58:67:05:51:6f:99:29:
31:66:f7:dd:00:72:dd:d7:65:69:57:aa:16:b4:6f:cb:fe:d0:
8b:3d:ef:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:08:38 2025 by rpki-client